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BACKGROUND OF THE INVENTION 

Field of the Invention 

[0001] The present invention relates to technologies for managing assignable 
network addresses to devices and adapters in computer and data communications 
5 networks, and especially to methods and processes for detecting duplicate network 
addresses. 

Background of the Invention 

[0002] Figure 1 shows a typical example of a computer conmiunications network or 
10 data communications network (11), which interconnects a number of network devices 
NDi, ND2, ... NDm, ... NDn, ... NDp, NDp+i ... NDq (17, 18, 19, 12, 103, 104, 105, 
106). Certain portions of the total network (10) may be isolated or partitioned into 
subnetworks ("subnets") (15, 101, 102) by devices such as switches, bridges, and 
routers (14, 100, 103), while other devices such as NDn (12) may be directly 
15 connected to a larger or central portion (1 1) of the network (10). 

[0003] In a computer communications networks, each device connected to the 
network (e.g. a "network adapter") typically has its own, unique low level address, 
such as a manufacturer assigned Media Access Control Address ("MAC") in the case 
of an Ethernet network. A network adapter's address is used to uniquely identify the 
20 adapter in the network when sending it data, or when receiving data from it. In a 
healthy network, no two adapters have the same address. Data is typically 
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transmitted in such networks in small bxirsts, often referred to as packets, frames, or 
cells, depending on the network origins and terminology. 

[0004] However, most network adapters also provide a software-definable address 
which overrides or replaces the manufacturer-supplied address. These "soft" 
5 addresses are often used by systems to reorganize or optimize the addressing scheme 
within a local area network ("LAN"), or within a wide area network ("WAN"). Such 
software defined addresses are referred to as Locally Administered Addresses 
("LAA") in the Ethernet paradigm. 

[0005] Care must be taken when assigning soft addresses to avoid assigning an 
10 address which is the same as the address of another network adapter on the same 
network. An invalid address will cause networking problems, especially in the case 
when the invalid address is a duplicate of another address on the same subnet. 
[0006] Most data network protocols, such as Ethernet, provide some sort of 
fiindamental process or mechanism to detect duplicate addresses, and in some cases, 
1 5 reassign them. Ethernet's Address Resolution Protocol ("ARP"), and Intemet 
Protocol's ("IP") Duplicate Address Detection ("DAD") processes are two such 
mechanisms. Figure 2 generally illustrates a relatively simple process (30) employed 
by many protocols to detect duplicate addresses, in which a unit receives (3 1) a firame 
or packet, extracts the sending unit's address (32), determines if it appears to be a 
20 duplicate address (33), and if so, simply reports (35) the duplicate address value (36) 
to an error log. At this point, it is up to the administrator to try to determine fi-om 
only this information which unit or imits are improperly using the same network 
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address. If the sending unit address does not appear to be a duplicate address, the 
frame or packet is handled normally (34) (e.g. terminated, delivered, routed, switched, 
etc.). 

[0007] The typical logic in LAN adapters today only reports a duplicate network 
5 address, usually through event interrupt to a host processor when a network adapter 
receives a message or packet from two sources which claim to have the same retum 
address (e.g. source address). This logic typically does not give any more detail data, 
as the protocol does not readily provide any other diagnostic information which the 
logic can easily report. IP DAD is well known to perform poorly in the presence of 
10 partitions, and because of its dependence on the use of timeouts, can be error prone in 
network where entry and exit of devices is expected often. 

[0008] When a duplicate address is detected by Ethernet ARP, message *!storms" 
can create excessive LAN traffic to duplicate MAC addresses. In addition, Ethernet 
switches can be adversely affected (ports taken out of services) and packets can be 

1 5 incorrectly routed. Ethemet LAA and similar redefinable address capabilities in other 
network types create a much higher possibility of assigning duplicate network 
addresses, which often creates many network problems. 
[0009] With no additional data on which to operate, there is no easy way for a 
system administrator to determine which network adapters in which network-attached 

20 systems are sharing duplicate addresses. 

[0010] This problem is exasperated by newer networks which "auto-configure"; i.e. 
each network adapter is automatically assigned an address upon entry or connection to 
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the network. Many wired and wireless network protocols include auto-configuration 
processes, some of which include use of an address server (16, 13). For example, in 
Internet Protocol, dynamic host address assignment is provided in many cases by 
Dynamic Host Configuration Protocol ("DHCP"), which requires access to a DHCP 
5 server to act as a centralized arbitrator and controller of addresses. However, there 
are many situations in which access to a centralized server is intermittent or 
unavailable, such as certain types of wireless networks and especially small networks. 
[0011] One altemative which has reportedly been proposed for systems which use 
large IP address values has been to somehow embed the Ethernet MAC address of a 

10 device into the dynamically assigned IP address, assuming that the MAC address is 
unique. But, in some cases, this is not feasible, such as attempting to embed a 48-bit 
IEEE 802. 1 1 MAC address into a 32-bit IP (Version 4) address. 
[0012] Another proposed solution is to issue some sort of message on a network 
which uses a potential address for assignment to see if a response is received from 

1 5 another adapter already having that address. In order to complete this process, a time 
limit must be assumed, after which if no response has been received, it is assumed 
that the potential address is free to be assigned to a newly attached or connected 
device. However, in some networks where large, unbounded delays are possible such 
as systems with many partitions, selection of an appropriately long time out value 

20 may not be possible, thereby rendering the method inoperable or impracticallyslow in 
some situations. 
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SUMMARY OF THE INVENTION 



[0013] The present invention enhances typical duplicate address detection logic on 
networked devices to not only report duplicate network addresses, but also report any 
5 available addresses contained in a second or subsequent protocol being carried by the 
data. In this manner, more information may be mined from the available data on the 
network without the need for adopting or changing network protocols, hardware, etc. 
[0014] For example, in a situation where IP packets are encapsulated in Ethernet 
protocols (e.g. IP over Ethernet), when a duplicate Ethernet MAC address is detected 

10 in a received Ethernet frame, if payload of the frame is inspected to find an IP address 
header, and the IP address of the sending unit is extracted. As such, both the 
duplicate MAC address and the IP address of the offending unit can be reported. 
There is a useftil improbability that the offending unit (e.g. the later-assuming unit for 
the previously-assigned MAC address) also would have a duplicate IP address, and 

15 thus the IP address can be used to uniquely identify the unit which needs to be 
reassigned. 

[0015] Network administrators are provided more data to locate the networked 
device(s) sharing addresses so that corrective action may be taken, either manually or 
automatically. 

20 [0016] According to an altemate embodiment of the present invention, the network 
device can be automatically commanded to switch to a new address, and the 
secondary address (e.g. the IP address) can be used to obtain and report other 
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information (e.g. URL, administrative contact information, etc.) from name servers 
such as Domain Name Servers, "Whols" servers, etc. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



[0017] The following detailed description when taken in conjunction with the 
figures presented herein provide a complete disclosure of the invention. 
5 [0018] Figure 1 depicts a typical computer and data communications arrangement 
including a plurality of networked devices, subnetworks, and bridges, routers, or 
switches. 

[0019] Figure 2 illustrates the logical process generally followed by networked 
devices of the present art for handling duplicate address contention. 
10 [0020] Figure 3 depicts a generalized computing platform architecture, such as a 
personal computer, server computer, personal digital assistant, web-enabled wireless 
telephone, or other processor-based device. 

[0021] Figure 4 shows a generalized organization of software and firmware 
associated with the generalized architecture of Figure 2. 
1 5 [0022 Figure 5 provides and example of an IP packet being carried in the payload of 
a Ethernet packet. 

[0023] Figure 6 sets forth a logical process according to the present invention. 
[0024] Figure 7 sets forth an enhanced logical process according to the present 
invention. 

20 [0025] Figure 8 shows an alternative embodiment of a logical process according to 
the present invention in which automatic corrective action is taken. 
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DESCRIPTION OF THE INVENTION 



[0026] The present invention is preferably realized as a software-implemented 
process executed by a processor or embedded controller of a networked device, 
5 network adapter, or similar hardware circuit. We will refer to the full range of 
hardware devices which may host or execute such a process as a "platform". As 
such, we first tum our attention to description of suitable computing platforms with 
which the present invention may be realized. 

10 Suitable Computing Platforms 

[0027] Turning to Figure 2, a generalized architecture is presented including a 
central processing unit (81) ("CPU"), which is typically comprised of a 
microprocessor (82) associated with random access memory ("RAM") (84) and 
read-only memory ('ROM") (85). Often, the CPU (81) is also provided with cache 

1 5 memory (83) and programmable FlashROM (86). The interface (87) between the 
microprocessor (82) and the various types of CPU memory is often referred to as a 
"local bus", but also may be a more generic or industry standard bus. 
[0028] Many computing platforms are also provided with one or more storage 
drives (9), such as a hard-disk drives ("HDD"), floppy disk drives, compact disc 

20 drives (CD, CD-R, CD-RW, DVD, DVD-R, etc.), and proprietary disk and tape drives 
(e.g., Iomega Zip [TM] and Jaz [TM], Addonics SuperDisk [TM], etc.). Additionally, 
some storage drives may be accessible over a computer network. 
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[0029] Many computing platforms are provided with one or more communication 
interfaces (810), according to the function intended of the computing platform. For 
example, a personal computer is often provided with a high speed serial port (RS-232, 
RS-422, etc.), an enhanced parallel port ("EPF"), and one or more universal serial bus 
5 ("USB") ports. The computing platform may also be provided with a local area 

network ("LAN") interface, such as an Ethemet card, and other high-speed interfaces 
such as the High Ferformance Serial Bus IEEE- 1394. 

[0030] Computing platforms such as wireless telephones and wireless networked 
FDA's may also be provided with a radio frequency ('RF") interface with antenna, as 
10 well. In some cases, the computing platform may be provided with an infrared data 
arrangement ('IrDA") interface, too. 

[0031] Computing platforms are often equipped with one or more internal 
expansion slots (811), such as Industry Standard Architecture ("ISA"), Enhanced 
Industry Standard Architecture C'EISA"), Feripheral Component Interconnect 
1 5 ("PCI"), or proprietary interface slots for the addition of other hardware, such as 
sound cards, memory boards, and graphics accelerators. 

[0032] Additionally, many units, such as laptop computers and PDAfe, are provided 
with one or more external expansion slots (812) allowing the user the ability to easily 
install and remove hardware expansion devices, such as PCMCIA cards, SmartMedia 
20 cards, and various proprietary modules such as removable hard drives, CD drives, and 
floppy drives. 
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[0033] Often, the storage drives (89), communication interfaces (810), internal 
expansion slots (811) and external expansion slots (812) are interconnected with the 
CPU (1) via a standard or industry open bus architecture (88), such as ISA, EISA, or 
PCI. In many cases, the bus (88) may be of a proprietary design. 
5 [0034] A computing platform is usually provided with one or more user input 
devices, such as a keyboard or a keypad (816), and mouse or pointer device (817), 
and/or a touch-screen display (818). In the case of a personal computer, a full size 
keyboard is often provided along with a mouse or pointer device, such as a track ball 
or TrackPoint [TM]. In the case of a web-enabled wireless telephone, a simple 
1 0 keypad may be provided with one or more fimction-specific keys. In the case of a 
PDA, a touch-screen (818) is usually provided, often with handwriting recognition 
capabilities. 

[0035] Additionally, a microphone (819), such as the microphone of a web-enabled 
wireless telephone or the microphone of a personal computer, is supplied with the 
1 5 computing platform. This microphone may be used for simply reporting audio and 
voice signals, and it may also be used for entering user choices, such as voice 
navigation of web sites or auto-dialing telephone numbers, using voice recognition 
capabilities. 

[0036] Many computing platforms are also equipped with a camera device (100), 
20 such as a still digital camera or fiiU motion video digital camera. 

[0037] One or more user output devices, such as a display (8 1 3), are also provided 
with most computing platforms. The display (813) may take many forms, including a 
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Cathode Ray Tube ("CRT"), a Thin Flat Transistor ('TFT") array, or a simple set of 
light emitting diodes ("LED") or liquid crystal display (*LCD") indicators. 
[0038] One or more speakers (8 1 4) and/or annunciators (8 1 5) are often associated 
with computing platforms, too. The speakers (814) may be used to reproduce audio 
5 and music, such as the speaker of a wireless telephone or the speakers of a personal 
computer. Annunciators (815) may take the form of simple beep emitters or buzzers, 
commonly found on certain devices such as PDAs and PIMs. 

[0039] These user input and output devices may be directly interconnected (8', 8") to 
the CPU (81) via a proprietary bus structure and/or interfaces, or they may be 
10 interconnected through one or more industry open buses such as ISA, EISA, PCI, etc, 
[0040] The computing platform is also provided with one or more software and 
firmware (8101) programs to implement the desired fiinctionality of the computing 
platforms. 

[0041] Turning to now Figure 4, more detail is given of a generalized organization 
1 5 of software and firmware (8 1 0 1 ) on this range of computing platforms. One or more 
operating system ("OS") native application programs (823) may be provided on the 
computing platform, such as word processors, spreadsheets, contact management 
utilities, address book, calendar, email client, presentation, financial and bookkeeping 
programs. 

20 [0042] Additionally, one or more "portable" or device-independent programs (824) 
may be provided, which must be interpreted by an OS-native platform-specific 
interpreter (825), such as Java [TM] scripts and programs. 
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[0043] Often, computing platforms are also provided with a form of web browser or 
micro-browser (826), which may also include one or more extensions to the browser 
such as browser plug-ins (827). 

[0044] The computing device is often provided with an operating system (820), 
5 such as Microsoft Windows [TM], UNIX, IBM OS/2 [TM], LINUX, MAC OS [TM] 
or other platform specific operating systems. Smaller devices such as PDA's and 
wireless telephones may be equipped with other forms of operating systems such as 
real-time operating systems ("RTOS") or Palm Computing's PalmOS [TM]. 
[0045] A set of basic input and output fimctions ("BIOS") and hardware device 

10 drivers (821) are often provided to allow the operating system (820) and programs to 
interface to and control the specific hardware functions provided with the computing 
platform. , 
[0046] Additionally, one or more embedded firmware programs (822) are conmionly 
provided with many computing platforms, which are executed by onboard or 

1 5 "embedded" microprocessors as part of the peripheral device, such as a micro 

controller or a hard drive, a communication processor, network interface card, or 
sound or graphics card. In fact, the processes of the present invention may also be 
realized in firmware for such embedded processors, running under suitable executives 
or embedded operating systems. Local Area Network interface cards, dial-up 

20 modems, and wireless network adapters often contain embedded processors which 
may be optionally programmed to include processes according to the present 
invention. 
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[0047] As such. Figures 3 and 4 describe in a general sense the various hardware 
components, software and firmware programs of a wide variety of computing 
platforms, including but not limited to personal computers, PDAs, PIMs, web-enabled 
telephones, and other appliances such as WebTV [TM] imits, as well as an array of 

5 embedded processors. As such, we now turn our attention to disclosure of the present 
invention relative to the processes and methods preferably implemented as software 
and firmware on such a computing platform. It will be readily recognized by those 
skilled in the art that the following methods and processes may be altematively 
realized as hardware fiinctions, in part or in whole, without departing fi*om the spirit 

1 0 and scope of the invention. 



Packetized Network Protocol Generalities 

[0048] The present invention utilizes the fact that many network protocols are 
capable of, and often do, carry data which is already formatted into a second protocol 

15 fi"om use on another network. We will refer to this as "encapsulation" of the second 
protocol into or onto the first protocol throughout the present disclosure. It will be 
recognized by those skilled in the art that additional layers or levels of encapsulation 
is often performed within the second, third, etc., protocols, and that the present 
invention is not limited to any particular protocols, although we will use two common 

20 protocols to illustrate the invention. For example, many "open" or standardized 

protocols such as Ethemet, Bluetooth, Universal Serial Bus ("USB"), WiFi, TCP/IP, 
Point-to-Point Protocol ("PPP"), FDDI, ATM, Fiber channel, as well many 
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proprietary protocols are capable of carrying data encoded for each other. Further, 
we will refer collectively to packets, frames, cells, and the like as simply "packets". It 
is within the skill of those in the art to apply the present invention, given the 
disclosure herein, to alternate protocols which may use alternate terminology. 
5 [0049] Turning to Figure 5, an illustrative example (20) of an Ethernet packet (27) 
which is carrying all or part of an IP packet. This situation occurs where a networked 
device, such as a Personal Computer ("PC"), is accessing the Internet via a local area 
network. Information which traverses the Internet between servers and browsers, for 
example, is encoded according to Transmission Control Protocol/Internet Protocol 
1 0 CTCP/IP"), and packaged into IP packets. The PC, however, interfaces directly to an 
Ethernet Local Area Network, and indirectly to the Internet. Therefore, the IP 
packets to and from the PC are encapsulated into one or more Ethemet packets while 
being carried on the LAN. 

[0050] As shown, the Ethemet packet (27) includes a header (21), which among 
1 5 other data items includes a destination MAC address (24) and a source MAC address 
(25). The destination MAC address (24) indicates the terminal or device to which this 
packet should be delivered, while the source MAC address (25) indicates the address 
of the terminal or device which sent the Ethemet packet (27) (e.g. a return address). 
[0051] Following the Ethemet header (2 1 ) is a payload (22), which is the portion of 
20 the packet (27) that carries data for the destination device from the source device such 
as parts of a web page, application data, digitized audio or video, etc. In many 
protocols, the length of the payload is a fixed value (e.g. a set number of bits, bytes, 
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words, etc.), while in other protocols, the length of the payload is variable. In 
protocols which employ variable length payloads, often the header (21) includes a 
"packet length" or "payload size" indicator or parameter to assist the receiving unit in 
properly interpreting the packet. 
5 [0052] The payload (22) is followed by a footer (23), which typically includes an 
error detection parameter such as a Cyclic Redundancy Code ("CRC") value, and 
some sort of closing flags or bit pattem to conclusively signal the end of the packet. 
[0053] In this example, the payload (22) does not just carry "raw" data, but is 
carrying data encoded by a second protocol, in this case IP. An IP packet (28) is 

10 carried within the Ethernet payload (22), including an IP header (29), IP payload 
(200), and an IP footer (2 1 ). The IP header, payload, and footer have similar 
functionality as the Ethernet header, payload, and footer, but varies in implementation 
detail. For example, the IP header (29) includes a destination IP address (202) and a 
source IP address (203). It is important to note, however, that the IP source address 

15 (203) is not equal to the source MAC address (25), nor is the destination IP address 
(202) equal to the destination MAC address (24), as these addresses are parts of 
different protocols and potentially used on different parts of the entire network. 

Logical Processes of the Present Invention 
20 [0054] Duplicate address resolution processes which are known in the art only 

attempt to use information available within a single protocol, such as Ethemet-onlyor 
Intemet Protocol-only information. The present invention, however, employs 
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processes and methods to take advantage of the fact that the payloads of many packets 
encoded in a first protocol often contain data which is further encoded in a second 
protocol, and even further to be encoded into additional protocols. This 
inter-protocol information is extracted in order to produce useful information for 
5 resolving an address conflict in the first protocol. 

[0055] Every time the adapter detects a packet with a duplicate first protocol source 
address (e.g. a duplicate MAC address), the invention reads further into the first 
protocol packet to access the payload portion of the packet, instead of stopping with 
just reading a few bytes for the packet's header. 

10 [0056] When looking into the data contained in the first protocol's packet payload, a 
header of an encapsulated protocol packet can be found as this is typically a known 
or expected protocol format. For example, it can be known that the first protocol is 
Ethernet, and that the second or encapsulated data contained within the Ethemet 
payload will be IP packets. As such, the payload(s) among one or more Ethemet 

1 5 packets fi*om the suspected dupUcate MAC source address can be accessed and 

searched for an IP packet header. When the second or encapsulated protocol header is 
found, it can be further dissected to find a secondary source address. This secondary 
source address is then used as a "key" to help indicate or find the offending sending 
unit which is using a duplicate first-protocol address. Conceptually, searching to find 

20 a third, fourth, etc., protocol header encapsulated in the second, third, etc., protocol 
can also be performed to mine additional data which would assist in identifying the 
offending sending unit. 
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[0057] As such, the enhanced logic of our invention intelligently finds the Key 
which will help network administrators identify the duplicate MAC address station in 
our example (e.g. the IP source address will be the key in a situation of 
IP-over-Ethemet). The key and the source address firom the first protocol is passed to 
5 a device driver in order to log an error report which is made available to a system 
administrator. 

[00S8[ Turning now to Figure 6, a logical process (40) according to the present 
invention is shown, in which a packet is received (41) by a networked device, and the 
sender's address is extracted (42) according to the definitions of the primary or first 

10 protocol. If the sender's address does not appear to be a duplicate address (43), then 
the packet is handled normally (e.g. routed, terminated, switched, stored, etc.). 
[0059] If, however, the sender's address appears to be a duplicate address (43), then 
the payload of the packet is examined (45) (or of previous or subsequent packets) to 
find a header for an encapsulated protocol, or secondary protocol. If the encapsulated 

1 5 protocol is known, then the process of finding an encapsulated packet header is 

relatively straightforward (e.g. searching for a data pattem which indicates a start of a 
packet according to the encapsulated protocol definitions). It is possible, however, in 
a more advanced realization of the invention to search (44) for a range of protocol 
types such that the payload of the primary protocol packets can be automatically 

20 analyzed for a range of encapsulated protocols. This type of automatic protocol 

determination only requires the logical process to search for multiple pattems of data 
which indicate the opening or beginning of a new packet, and preferably includes 
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logic to search for the end of the same packet to confirm the protocol selection and 
avoid false protocol identification by data patterns which are present and which alias 
another protocol's header/footer patterns. 

[0060] After the beginning of an encapsulated packet is found in the payload(s) of 
5 the first packet, the header of the encapslated packet is dissected to extract (45) a 
source address according to the encapsulated or secondary protocol. 
[0061] At minimum, this information is then reported (e.g. the first source address 
and the second source address) to an error report (45), such as reporting a duplicate 
MAC address and the associated IP address (47) which is being encapsulated firom 
10 that sending unit. This enhanced error report can then be used by a system 

administrator to determine exactly which unit(s) are using duplicate addresses, and 
corrective action may be taken (e.g. reassigning the xmit to another address). 



Extensibility to Multiple Layers of Protocol Encapsulation 

1 5 [0062] In many situations, the second protocol may yet encapsulate a third protocol, 
which may fiirther encapsulate a fourth protocol, and so on. For example, consider 
the PC example previously discussed which is accessing a RealPlayer file (e.g. a 
digitized video file) from a Real Networks [TM] server. So, at the point of entry and 
exit from the PCs network adapter card interfacing to a LAN, each packet will have 

20 the following protocol encapsulation: Ethemet encapsulating IP which in turn 
encapsulates the Real Networks proprietary protocol. In this example, the first 
protocol is Ethemet, the second is IP, and the third is Real Network protocol. 
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Extending the logic of the present invention to further examine the third protocol 
encapsulated data to find a third source address (or fourth, fifth, etc.) can provide even 
more information to aid a system administrator in finding and correcting addressing 
problems. 



Correlation of Data to Source Names 

[0063] Many protocols allow or provide a more user-fiiendly addressing scheme, 
1 0 such as the Internet's Domain Name system. In such networks, a query can be made 
to a naming server or naming service which will retum an address value or 
conversion. For example, when a user types a web site name (e.g a Uniform Resource 
Locator or URL) into a web browser, the web browser posts a request to a domain 
name server to provide an IP address (e.g. a numeric address) corresponding to the 
1 5 user-fiiendly web site name. For example, the URL may be 

"www.big-business.com", which may be associated with an IP address of 
1 89. 19.54.xx, where xx is a range of subnet values assigned to the URL. As web 
servers only receive IP packets addressed to IP addresses and not to URL's, the web 
browser then receives the IP address from the name server, and uses that IP address as 
20 a destination address in an Hyper Text Transfer Protocol ("HTTP") "get" request to 
obtain the index or home page fi-om the addressed web site server. 
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[0064] According to one aspect of the present invention, when the secondary (or 
tertiary, etc.) protocol is a protocol which also provides a naming service, the logical 
process (50) of the invention takes advantage of this fact as shown in Figure 7. After 
(47) determining the duplicated primary source address (e.g. a MAC address), and 
5 extracting an encapsulated secondary source address (e.g. an IP address), a name 
query is performed (51) to one or more name servers (52), such as a domain name 
server. This may obtain a more user-friendly reference to the unit which has the 
dupUcated address, such as a URL or server name. 

[0065] Other types of name servers, such as the Intemet's "Who Is" server (found at 
10 www.whois.net), or Yahoo's! PeopleSearch can also return administrative contact 
names, addresses, email addresses, and phone numbers, or server owner information 
such as company name, telephone number, and address. These types of servers may 
also be queried, as well. 

[0066] The additional information obtained through these extra steps can then be 
15 incorporated into the error report (53) provided to the system administrator, to allow 
the system administrator to easily and quickly contact the offending device's owner by 
telephone, email, fax, pager, instant message, etc. 

Automatic Corrective Action 
20 [0067] Tuming to Figure 8, the logical process as shown in Figure 6 can be further 
enhanced to take automatic corrective action for one or more of the networked 
devices which improperly share an address. Network adapters such as wireless LAN 
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cards and wired Ethernet interface cards are typically controllable through a device 
driver software module. In other system configurations, an application programming 
interface ("API") command is often provided to the system software to allow the 
system software to command the device to use or assume an alternate network 
S address. 

[0068] So, according to this enhanced embodiment, the logical process is modified 
to include commanding (81) the network interface or adapter via a device driver 
fimction or API call to use an alternate address such as an alternate MAC address in 
the case of an Ethernet network. As this altemate address may also already be 
10 assigned, the rest of the logical process (41 - 47) may be repeated (82) until an 
available address is assumed without any detected conflicts. 



Summarv 

[0069] Certain details of the present invention have been provided with respect to 
1 5 one or more embodiments, and specific examples have been disclosed in order to 
illustrate the invention. It will be recognized by those skilled in the art that the 
present invention is not limited to these embodiment details or examples, and that 
altemate protocols, networks, topologies, computing platforms, and programming 
methodologies may be employed to realize altemate embodiments of the present 
20 invention. Therefor, the scope of the present invention should be determined by the 
following claims. 
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